IdP attribute filter strategy

Tom Scavo trscavo at gmail.com
Sat Jun 6 10:51:57 EDT 2015


On Fri, Jun 5, 2015 at 9:37 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/5/15, 12:55 PM, "users on behalf of Jeffrey Crawford" <users-bounces at shibboleth.net on behalf of jeffreyc at ucsc.edu> wrote:
>>
>>The filter will not augment existing AttributeValues in the metadata. Not really a problem in the real world but I noticed it while testing and wanted to point that out just in case someone ran into it thinking it wasn't working at all.
>
> I would expect it to add another Attribute element to the extension, though probably not add values to the existing one.

I would never publish an entity descriptor with two entity attributes
having the same name (that's very tacky :) but since this metadata is
being produced and consumed by the Shibboleth SP, I think that's a
perfectly okay thing to do.

Tom


More information about the users mailing list